Welcome to read our privacy Policy

Last updated on 2023-03-30

 

Privacy Policy Metry AB (org. nr 556902-4804) Kämpegatan 6, 41104 Göteborg (”Metry”).We at Metry are committed to protecting and respecting your privacy. So we thank you for reading our privacy policy, and for sending any questions you may have about how we process your data to:

support@metry.io, or our Data Protection Officer Hanna Bjärkvik, at hanna.bjarkvik@metry.io.

Metry only collects and uses your personal data for specific and lawful purposes, which we aim to make transparent to you through this policy. Personal data may be processed about you:

  • When you visit our website, www.metry.io,
  • To establish and administer our customer relationship with your employer,
  • For marketing purposes (newsletters and other marketing communications).

For these processings, Metry is the Controller (a GDPR term meaning we are responsible for how and whythis takes place). The most common and impactful processing activities are described in this policy, but you always have the right to request access to all personal data we process about you.

For which Purposes Do We Use the Personal Data We Collect?

We process your personal data for the purposes listed below:

1) Establish and administer customer relationships

  • Examples of processing
    • Find and communicate with contact persons (including contact persons at customers’ collaboration partners which have been invited to our platform)
    • Create a demo account for potential customers, to be used by a physical person
    • Create a customer account if the customer signs up for an account
    • Onboard customers, including adding users, customer dialogues etc.
    • Provide our services, including when customers add other users, when customers add e-mail addresses intended to receive communication such as automatic reports etc.
    • Provide support
    • Manage invoicing and accounting
    • Setup Data Source Connection
    • Facilitate our customer relationship in other ways.
  • Sharing: Not shared outside of Metry
  • Retention: During the time which the customer relation is active and one year thereafter, unless the customer has requested deletion of the personal data before that point in time.
    Lawful basis: Legitimate Interest
  • Your rights: Access, Rectification, Erasure, Restriction, and Objection.
  • Personal data: We collect names, addresses, e-mail addresses and telephone numbers for our customers and potential customers.

2) General marketing purposes

  • Examples of processing
    • Sending offers and marketing material to existing and potential customers. However, we never transfer your personal data to a third party for marketing purposes.
  • Sharing: Not shared outside of Metry
  • Retention: We process the data as long as you have not opted out from further communication. If you have opted out of marketing communication, we store information about such opt-out for the sole purpose of ensuring that we do not send you such communication which you do not wish to receive.
  • Lawful basis: Legitimate Interest
  • Your rights: Access, Rectification, Erasure, Restriction, and Objection.
  • Personal data: We collect names, addresses, e-mail addresses and telephone numbers for potential customers.

3) Marketing to customers and subscribers

  • Examples of processing
    • Sending newsletters and/or other marketing communications to customers and persons who have signed up to receive such communication from us
  • Sharing: We never transfer your personal data to a third party for marketing purposes.
  • Retention: For as long as you are signed up for the newsletter. You have the option to opt-out from receiving such communication from us by clicking on the unsubscribe-link in the newsletter or contacting us.
  • Lawful basis: Consent
  • Your rights: Access, Rectification, Erasure, Restriction, and to Withdraw your Consent.
  • Personal data: We collect names, addresses, e-mail addresses and telephone numbers for our customers, potential customers and others who have signed up for marketing communication from us.

4) Statistical purposes & further development

  • Examples of processing
    • Analyze the patterns of usage of our API by different customers and partners to be able to troubleshoot issues as well as understand how we can improve our features or services to their needs.
    • Statistical analysis
    • To further develop our products, services and offerings
    • To improve our support service
  • Shared: Google Analytics (only data that can not identify you)
  • Retention: Two years
  • Lawful basis: Consent
  • Your rights: Access, Rectification, Erasure, Restriction, and Objection.
  • Personal data: We collect names, addresses, e-mail addresses and telephone numbers for our customers, potential customers and others who have signed up for marketing communication from us.

Furthermore, we process personal data as and when required by law (e.g., to satisfy bookkeeping legislation).

Our service providers and third country transfers

For some tasks, we use suppliers which act on our specific instructions (under GDPR these are called “Processors”), regulated by data processing agreements. In case we transfer personal data outside the EU, such transfers are made under the EU’s standard contractual clauses for third country transfers, together with supplementary measures, as necessary. Please contact us should you have any questions as to the specific safeguards and this processing.

Our Processors do not have the right to save personal data once their task is completed and do not have the right to use them for any other purpose of their own or outside of our instructions.

Your Rights

Access to your personal data

This means that you have the right to request information on our use of your personal data. You also have the right to request a copy of the personal data being processed by us, at no cost. However, we may charge you a reasonable administrative fee to provide you with additional copies of such information. If you make your access request by electronic means such as email, we will provide you with the information in a commonly used electronic format.

Right to data portability

You have the right to receive the personal data that we process which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller if

  • we based our processing of that data on your consent, or we base it on fulfillment of a contract with you, and
  • the processing is carried out by automated means.

If technically feasible, you will then also have the right to have that personal data transmitted directly from us to another controller.

Rectification of your personal data.

We will, at your request, or at our own initiative, rectify, anonymize, erase, or complement personal data that you or we discover is inaccurate, incomplete, or misleading. You also have the right to complete the personal data with additional data if relevant information is missing.

Erasure of your personal data

You have the right to request that we erase your personal data and we must erase it if:

  • the personal data is no longer necessary for the purposes for which it was collected,
  • we use your personal data with your consent, you withdraw your consent and there is no other legal ground for the processing,
  • you object to the processing of your personal data based on our legitimate interest and there is no overriding legitimate ground for continued processing,
  • the personal data has not been lawfully processed, or we are required to erase the personal data due to a legal obligation.

However, there might be requirements under applicable law, or other compelling reasons, that prevent us from immediately erasing your personal data. In such a case, we will stop using your personal data for any other reasons than to comply with the applicable law, or the relevant compelling reason.

Right to restrict processing

This means that we temporarily restrict the processing of your personal data. You have the right to request restriction of the processing when:

  • you have requested rectification of your personal data, during the period of time we are verifying the accuracy of the data,
  • the processing is unlawful, but you do not want the personal data to be erased,
  • We, as the data controller, no longer needs the personal data for the purposes for which it was collected, but you require us to retain the information for the establishment, exercise, or defence of a legal claim, or
  • you have objected to a processing activity we base on our legitimate interests, during the time we determine whether our legitimate interests override your privacy rights.

Your right to object to the processing

You have the right to object to the processing of your personal data that we base on our legitimate interests. If you object to such processing, we will only continue with the processing if we have a compelling legitimate reason for the processing that outweighs your interests, rights or freedoms, or if continued processing is necessary for the establishment, exercise or defence of a legal claim. You can always contact us for more information on the balance test that has been made.

When processing your personal data based on your consent, you always have the right to withdraw such consent at any time by contacting us. You will find our contact details at the end of this Privacy Notice.

Your right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority in the country you live or work in.

In Sweden, the Supervisory Authority is Integritetsskyddsmyndigheten, which is also our lead supervisory authority, and you can find more information at their website: https://www.imy.se/om-oss/kontakta-oss/. For other Supervisory authorities, visit: https://edpb.europa.eu/about-edpb/about-edpb/members_en. We do, of course, hope you contact us first to let us help you. You will find our contact details at the top of this page.